Archive contains a .SCR file, which is viral.
Path:
border6.newsrouter.astraweb.com!news.astraweb.com!border5.newsrouter.astraweb.com!news.alt.net!newsfeed.xs4all.nl!newsfeed5.news.xs4all.nl!xs4all!feeder1.cambriumusenet.nl!216.196.110.149.MISMATCH!border2.nntp.ams.giganews.com!border3.nntp.ams.giganews.com!Xby.tags.giganews.com!border1.nntp.ams.giganews.com!nntp.giganews.com!xlned.com!feeder5.xlned.com!feeder3.cambriumusenet.nl!feed.tweaknews.nl!193.201.147.78.MISMATCH!feeder.news-service.com!feeder.news-service.com!usenext.news-service.com!not-for-mail
From: Postaster@hotmails.com (Postmaster)
Sender: Postaster@hotmails.com
Newsgroups: alt.binaries.nospam.amateur.female
alt.binaries.erotica.young,alt.binaries.nospam.amateur.female,alt.binaries.pictures.candid.girls,alt.binaries.pictures.erotica.young,alt.binaries.pictures.nude,alt.binaries.pictures.vladmodels,alt.binaries.pictures.young
Subject: Young Fiirst Time.rar (01/23)
X-Newsposter: YENC-POWER-POST-A&A-v11b (Modified POWER-POST
www.CosmicWolf.com)
Message-ID: <80a40$4d8f5c84$54bdcdc3$18398@usenext.news-service.com>
X-Complaints-To: usenext@news-service.com
Organization: Aviteo Ltd. reselling News-Service.com
Date: Sun, 27 Mar 2011 17:49:24 +0200
Lines: 1984
NNTP-Posting-Date: Sun, 27 Mar 2011 17:49:24 +0200
|
|